Information security risk represents the potential for a security incident to occur that results in loss, damage, or harm to the organisation’s information assets encompassing its data, its systems, its networks, and its processes. More precisely, it is the probability that a threat will successfully exploit a vulnerability to compromise the confidentiality, the integrity, or the availability of the information the organisation depends upon to operate. Understanding this relationship between the threat, the vulnerability, and the potential incident is the foundational intelligence that the risk management programme, the SOC’s detection priorities, and the security investment decisions all require as the analytical basis for the governance choices that the security programme must make.
Threats #
A threat is any potential cause of an incident that could result in harm to the organisation’s information assets. Threats are distinguished from incidents by their status as the potential rather than the actual: the threat describes what could happen, while the incident describes what has happened through the threat’s successful exploitation of the vulnerability the organisation has failed to adequately address.
Keep reading with a free Eristotle account.
Every document across our Bodies of Knowledge is free to read once you are signed in. No payment, no tier.
